CVE-2021-45967

CRITICAL · CVSS 9.8 EPSS 20.80%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-03-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-45967

Severity

CRITICAL

CVSS

9.8

EPSS

20.80%

Nginx

Original NVD Description

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.